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Abstract 


We  suggest  a  new  approach  to  database  updates,  in  which  a  database  is  treated  as  a  collection  of 
theories.  We  investigate  two  issues:  simultaneous  multiple  update  operations,  and  equivalence  of  databases 
under  update  operations. 


1.  Introduction 

One  of  the  main  problems  in  database  theory  is  the  problem  of  view  updating,  i.c.,  how  to  translate  an 
update  on  a  riser  view  into  an  update  of  the  database  ([OS},  [CAj,  [DO] ,  (J).  [Ke),  [Klj,  [0]).  The  problem 
is  that  in  general  there  is  no  unique  database  update  corresponding  to  the  view  update.  Another  problem 
is  that  of  updating  a  database  that  must  satisfy  certain  integrity  constraints  ([NY].  [T]) .  The  difficulty  here 
is  that  the  database  after  the  update  may  no  longer  satisfy  the  constraints,  in  which  case  wc  may  have  to 
modify  other  things  in  the  database,  to  ensure  that  the  integrity  constraints  still  hold.  As  in  the  ease  of  view 
updates,  there  is  not  necessarily  a  unique  way  to  modify  the  database  so  that  the  constraints  still  hold. 

Fagin  ct  al.  [FUV]  suggest  that  the  appropriate  framework  for  studying  the  semantics  of  updates  is  to 
treat  the  database  as  a  consistent  set  of  sentences  in  first-order  logic,  i.e..  a  theory.  A  theory  is  a  description 
of  the  world,  but  is  not  necessarily  a  complete  description;  every  model  of  the  theory  is  a  possible  state  of 
the  world.  Thus  the  database  can  be  viewed  as  :ui  exact  description  of  our  knowledge  about  the  world.  This 
framework  was  propounded  in  other  papers  (e.g.,  (Ko|,  [NGj.  [R]). 

When  one  tries  to  update  a  theory  by  inserting  or  deleting  some  sentence,  several  new  theories  can 
accomplish  the  update.  Fagin  et  <d.  [FUV]  argue  that  wc  should  fry  to  minimi/, c  the  change  that  is  needed 
to  accomplish  the  update.  Unfortunately,  even  under  this  minimality  constraint,  there  may  be  several 
theories  that  accomplish  the  update,  with  no  reasonable  way  to  choose  between  them.  One  approach  to  this, 
suggested  in  [FUV],  is  to  define  the  result  of  the  update  to  be  the  disjunction  of  ;dl  the  possible  theories  that 
accomplish  the  update  with  minimal  change.  Two  difficulties  with  this  approach  .-ire  that  it  requires  us  to 
have  sentences  of  a  rather  complicated  syntax,  e.g.,  disjunctions  of  tuples  in  a  relational  database,  and  that 
the  number  of  sentences  in  the  database  may  grow  doubly  exponentially  with  each  update. 

The  fact  that  several  theories  can  accomplish  a  given  update  motivates  an  alternative  approach:  viewing 
the  database  as  a  collection  of  theories  rather  than  a  single  theory.  We  call  a  collection  of  theories  a  hock. 
The  advantage  of  this  approach  is  that  it  is  easier  to  deal  with  the  multiplicity  of  Hocks  than  with  the 
multiplicity  of  theories.  With  the  new  approach,  the  sentences  we  get  arc  of  no  greater  complexity  th;ui 
those  that  were  in  the  database  or  those  that  were  inserted,  and  the  number  of  sentences  docs  not  grow  as 
fast  as  before. 

In  this  paper,  after  presenting  the  two  approaches  to  updates,  databases  as  theories  vs.  databases  as 
flocks,  wo  investigate  two  basic  issues.  First  we  study  hatch  operations,  in  which  many  sentences,  rather 
than  a  single  sentence,  tire  inserted  or  deleted  simultaneously.  We  then  observe  that  two  theories  or  flocks 
that  tire  logically  equivalent  may  not  be  equivalent  tifter  an  update  is  performed.  We  give  necessary  and 
sufficient  conditions  for  equivalence  forever,  i.c.,  equivalence  that  is  preserved  under  updates. 
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2.  Updates  of  Theories 


Our  basic  units  of  information  arc  sentences,  i.c.  formulas  without  free  variables.  We  do  not  allow 
inconsistent  sentences,  ami  we  do  not  allow  the  deletion  of  valid  sentences.  A  theory  is  a  consistent  set  of 
sentences.  We  shall  use  the  letters  A’  mid  T  to  denote  theories,  and  the  letters  a  and  r  to  denote  sentences. 

We  start  by  describing  the  framework  developed  in  jFIJV]. 

Definition  1: 

1.  A  theory  T  accomplishes  the  deletion  of  <r  from  9  if  T  ^  a. 

2.  A  theory  T  accomplishes  the  insertion  of  rr  into  9  if  o  G  T. 

Definition  2:  Let  7\.  T%  and  T  be  theories. 

1.  Ti  has  fewer  insertions  than  T-,  with  respect  to  T  if  Ti  -  T  C  Ti  -  T.  1 

2.  T\  has  fewer  deletions  than  Ti  with  respect  to  T  if  T  -  7\  C  T  -  7j. 

3.  Ti  bus  fewer  changes  tluin  Ti,  with  respect  to  T,  if  T(  has  fewer  deletions  than  Ti,  or  Ti  and  Ti  have 
the  same  deletions  (T  -  Ti  =  T  —  Ti)  and  Ti  lias  fewer  insertions  than  Tj. 

Definition  3:  A  theory  T  accomplishes  an  update  u  of  9  minimally  if  T  accomplishes  u  and  there  is  no 
theory  T'  that  accomplishes  u  and  has  fewer  changes  than  T  with  respect  to  S. 

Theorem  1:  ([FUV])  Let  9  and  T  be  theories  mid  let  a  be  a  sentence.  Then 

1-  S  accomplishes  the  deletion  of  a  from  T  minimally  iff  9  is  a  maximal  subset  of  T  that  is  consistent 
with  -'<7. 

2.  9  U  {<r}  accomplishes  the  insertion  of  a  into  T  minimally  ifF  9  is  a  maximal  subset  of  T  that  is 
consistent  with  a.  | 

There  could  be  many  theories  that  accomplish  mi  update  minimally.  Suppose  that  7\ ,  ....  T,t  are  the 
theories  that  .iccomplish  an  update  «  of  9  minimidly.  It  is  argued  in  [FL'V]  that  the  result  of  u  should  be  a 
theory  T  such  that 

Mod(T)  =  \J  Mod(Ti). 

l<i<n 

where  Mod(S)  is  the  set  of  models  of  the  theory  S. 

Definition  4:  Let  Ti,  ...  ,Tn  be  theories.  The  disjunction  of  these  theories  is  defined  to  be  the  theory 

V  Ti  =  (n  V  •  ■  •  V  rn  j  r<  G  T;,  l  <  i  <  ”}• 

l<»<n 

It  is  shown  in  [FUV]  that 

Mod/  y  Ti)  =  (J  Mod(Ti). 

l<i<n  1  i\n 

Thus  they  suggest  that  if  7\,  . . . ,  Tn  are  the  theories  that  accomplish  an  update  u  minimally,  then  the  result 
of  u  should  be  Vi<i<n  T,- 


3  We  us**  .  to  dcuote  inclusion,  and  t  to  denote  proper  inclusion. 
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3.  Flocks. 


In  this  section,  we  shall  describe  another  approach  to  updates,  namely  using  collections  of  theories.  We 
call  these  collections  flocks.  The  intuitive  idea  is  that  since  we  have  many  possible  theories  that  accomplish 
an  update  minimally,  wc  reflect  this  ambiguity  by  keeping  all  these  theories. 


Definition  5:  A  flock  S  is  a  set  of  theories.  The  models  of  S  arc 


Mod(S)  =  1J  Mod(S). 

scS 


To  update  a  Hock  we  have  to  update  each  theory  in  the  flock.  Formally: 

Definition  6:  Let  S  —  {.9j, . . . ,  6'„}  be  a  Hock.  A  flock  T  =  {Tt, . . .  ,Tn}  accomplishes  an  update  u  of  S 
minimally  if  T,  accomplishes  the  update  of  .S’,  minimally,  for  1  <  t  <  n. 

Again,  there  could  be  many  flocks  that  accomplish  an  update  minimally.  Suppose  that  Ti,  . . . ,  T„  are 
the  flocks  that  accomplish  an  update  u  of  S.  minimally.  As  in  [FUV],  we  contend  that  the  result  of  u  should 
be  a  Hock  T  such  that 

Mod(T)  =  (J  Mod(Ti). 

l<i<n 

It  is  easy  to  show  that  the  flock  Ui<;<„  T.  has  this  property.  This  motivates  the  following  definition: 

Definition  7:  Let  S  be  a  flock,  and  let  Si,  . . . ,  S„  be  the  flocks  that  accomplish  an  update  u  of  S  minimally. 
Then  the  result  of  u  is  the  flock  Ui<i<„S,-. 

Lemma  2:  Let  S  =  {Si, . . . ,  Sn}  be  a  flock.  For  each  theory  Si,  let  .9/,  ...,  S’/*  be  the  theories  that 
accomplish  the  update  u  of  S,  minimally.  Then  the  result  of  applying  u  to  S  is  the  Hock 

S'  =  {Sf  |  1  <  *  <  n,  l  <  fc  < 

Proof:  Let  S'  be  the  result,  of  the  update.  If  6’  €  S'  then,  by  Definition  7,  S’  e  Sj,  for  some  Sj  that 
accomplishes  the  update  minimally.  But  then,  by  Definition  6,  .S’  accomplishes  the  update  of  some  .9;  e  S 
minimally,  i.e.,  .9  is  one  of  the  theories  S/,  Sf‘. 

Now  let  S  =  .9/  for  some  k,  1  <  k  <  j\.  Then  .9  accomplishes  the  update  u  of  5,  minimally.  For  each  j, 
1  <  j  <  n,  j  »,  let  be  any  theory  that  accomplishes  the  update  u  of  Sj  minimally.  Then,  by  Definition  6, 
tlie  flock  {Sl,  ■ . . ,  SJ'  l,  .9,  S1  '■*, . . . ,  Sn}  accomplishes  the  update  u  of  S  minimally  and  so,  by  Definition  7, 
each  theory  in  this  flock  is  in  S'.  In  particular,  S  €  S'.  | 

In  other  words,  to  update  a  flock,  consider  each  theory  in  the  Hock  in  turn.  Take  all  theories  that 
accomplish  the  update  minimally  and  put  them  in  the  new  flock. 

Note  that  if  a  Hock  is  a  singleton,  i.e.,  contains  exactly  one  theory,  its  models  as  a  theory  and  as  a  flock 
are  the  same.  Also,  the  flock  that  we  get  after  applying  an  update  to  such  a  Hock  has  the  same  models  as 
the  theory  we  get  by  applying  the  update  to  the  single  manlier  of  that  flock,  as  the  following  lemma  shows. 

Lemma  3:  Let  S  =  { 5 }  be  a  singleton  flock,  and  u  an  update.  If  S'  is  the  result  of  applying  the  update  u 
to  the  theory  S.  anil  S'  is  the  result  of  applying  u  to  tin;  flock  S.  then  S'  and  S'  have  the  same  models. 

Proof:  By  Lemma  2,  the  result  of  applying  n  to  S  is  the  flock  S'  =  {5,  |  l  <  t  <  j).  where  9j,  ...,  Sj 
are  the  theories  that  accomplish  the  update  u  of  9  minimally.  Similarly,  the  result  of  applying  u  to  S’  is  the 
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theory  S'  =  Vkkj  S,-.  By  Definition  5  and  the  comments  at  the  end  of  Section  2,  S'  and  4?'  have  the  same 
models.  | 

Even  though  the  result  of  an  update  has  the  same  models  under  both  approaches,  under  future  updates 
their  results  may  differ,  as  the  following  example  shows. 

Example  1:  If  we  start  with  the  Hock  {{A.  2?}},  and  delete  A  A  27  from  it  using  the  Hocks  approach,  we 
take  all  the  maximal  subtheorios  of  {A,  27}  that  do  not  imply  A  A  27.  namely  {/4}  and  {27}.  That  is,  the 
resulting  tlock  is  {{A}.{ D } } .  If  we  now  delete  A  and  then  delete  27,  we  end  up  with  the  Hock  containing 
only  the  empty  theory,  i.e.,  anything  is  a  model  of  the  result.  On  the  other  hand,  if  we  start  with  the  theory 
{.4,27},  and  delete  si  A  27,  we  get  the  theory  {A  V  2?}.  Tills  has  the  same  models  iia  the  Hock  {{A},  {27}}. 
However  if  we  now  delete  A  and  then  delete  27,  we  still  have  the  theory  {A  V  27} ,  which  does  not  have  the 
same  models  as  the  empty  theory.  | 

In  practice,  singleton  Hocks  are  the  most  likely  to  he  used  as  the  starting  state  of  the  database  (in  fact, 
the  starting  state  will  probably  be  {0}).  It  would  be  interesting  to  characterize  tin'  flocks  that  are  obtained 
from  singleton  flocks  by  a  sequence  of  update  operations.  Another  interesting  question  is  the  comparative 
merit  of  the  two  approaches:  theories  vs.  flocks.  Wc  know  that  these  approaches  yield  different  results  for 
the  same  updates.  Which  one  of  them  is  more  correct? 


4.  Batch  Operations 


Batch  operations  consist  of  deleting  or  inserting  several  sentences  simultaneously. 

Definition  8:  Let  .S’  be  a  theory  and  let  E  be  a  set  of  sentences.  We  say  that  S'  accomplishes  the  deletion 
of  E  from  .S’  if  S'  (/  <r  for  each  it  6  E.  We  say  that  S'  accomplishes  the  insertion  of  E  into  ,S’  if  E  C  S' . 
We  say  that  S'  accomplishes  an  update  u  of  .S’  minimally  if  S'  accomplishes  «  and  there  is  no  theory  that 
accomplishes  u  with  fewer  changes. 

The  above  <lcfinition  is  noil-constructive  in  the  sense  that  it  does  not  explicitly  say  how  to  find  those  the¬ 
ories  that  accomplish  an  update  minimally.  The  following  theorem  gives  a  constructive  equivalent  condition, 
wliich  generalizes  Theorem  2. 

Theorem  4:  Let  S  and  T  be  theories  and  E  a  set  of  sentences.  Then 

1.  5  accomplishes  the  deletion  of  E  from  T  minimally  ilf  .S'  is  a  maximal  subset  of  T  such  that  Su{-'ff} 
is  consistent  for  all  cr  in  E. 

2.  SUE  accomplishes  the  insertion  of  E  into  T  minimally  ifr  .S’  is  a  maximal  subset  of  T  that  is  consistent 
with  E. 

Proofs 

1.  If  S  is  a  maximal  subset  of  T  that  is  consistent  with  -it  for  every  it  €  E,  then  clearly  S  accomplishes 
the  deletion  of  E  from  .S.  Assume  that  .S'  docs  not  accomplish  the  deletion  minimally,  i.c.,  there  is 
a  theory  S'  that  accomplishes  the  deletion  with  fewer  changes  than  .S’  with  respect  to  T.  If  S'  has 
fewer  deletions  than  S,  then  T  —  S'  C  T  -  5.  But  then  S'  n  T  is  also  consistent  with  -it,  for  all  <r  in 
E,  contrary  to  the  maximality  of  6’.  Therefore  S'  must  have  the  same  deletions  as  S  with  respect  to 
T.  Clearly  S'  cannot  have  fewer  insertions  than  5,  since  .S’  has  no  such  insertions  at  all. 

If  S  accomplishes  the  deletion  minimally,  it  must  be  consistent  with  -tt  for  every  a  G  E.  It  is  also 
clear  I  hat  S  C  T  since  if  it  contained  sentences  not  in  T  we  could  remove  them  and  get  a  theory  that 
accomplished  the  update  with  the  same  deletions  and  with  fewer  insertions.  If  5  is  not  a  maximal 
subset  of  T  that  is  consistent  with  all  the  —it’s,  then  there  is  a  theory  that  accomplishes  the  update 
with  fewer  deletions  than  S. 

2.  Let  5  be  a  maximal  subset  of  T  that  is  consistent  witli  E.  S  U  E  clearly  accomplishes  the  insertion 
of  E.  Suppose  that  S'  accomplishes  the  update  with  fewer  deletions,  and  let  S"  =  S'  0  T.  Then 
T  —  S"  =  T  —  S'  C  T  —  S,  and  therefore  S  C  S"  C  T  and  S"  is  consistent  with  E—  contradicting  the 
maximality  of  S.  Clearly,  no  theory  can  accomplish  the  insertion  with  the  same  deletions  and  with 
fewer  insertions  than  S  U  E,  since  the  only  insertions  arc  E. 

If  S  U  E  accomplishes  the  insertion  of  E  minimally,  we  must  have;  .S’  C  T  and  b’  consistent  with  E. 
If  S  is  not  a  maximal  subset  of  T  that  was  consistent  with  E.  then  we  can  timl  .S'  consistent  with 
E  that  satisfies  S  C  S'  C  T.  But  then  S'  U  E  accomplishes  the  insertion  with  fewer  deletions -- 
contradiction.  | 

Using  Definition  8,  we  can  define  the  result  of  batch  updates  both  for  theories  and  for  flocks.  For 
theories,  we  define  the  result  of  the  update  to  be  the  disjunction  of  all  the  theories  that  accomplish  the  update 
minimally,  as  in  Definition  4.  For  florks,  we  use  Definitions  C  anil  7.’  Namely,  to  update  a  flock  consider  each 
theory  in  the  Hock  in  turn,  take  all  theories  that  accomplish  the  update  of  this  theory  minimally,  and  put 
them  into  the  new  flock.  In  the  sequel,  we  reserve  the  term  update  (respectively,  deletion,  insertion)  for  the 
ease  where  a  single  sentence  is  deleted  or  inserted,  to  distinguish  it  from  batch  update  (respectively,  batch 
deletion,  hatch  insertion),  where  a  set  of  sentences  is  deleted  or  inserted. 
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The  following  example  shows  that  the  batch  deletion  of  E  does  not  always  give  the  same  result  aa 
deleting  the  sentences  iu  E  one  by  one. 

Example  2:  Deleting  {A,B)  from  the  theory  {A.D,A  =  B }  results  in  the  theory  {4  =  Z? } .  If,  on  the 
other  hand,  we  delete  first  A,  we  get  the  theory  {U  V  (A  =  B)}.  which  remains  unchanged  after  deleting  B. 
Deleting  first  B  and  then  A  gives  us  the  theory  {A  V  (A  =  Z?)}. 

Deleting  {A,  B}  from  the  flock  {{A,  B,A  =  Z?}}  results  in  the  flock  {{A  s  B}}.  If,  on  the  other  hand, 
wc  delete  first  A  we  get  the  Hock  {{£?},  {A  s  Z?} } ,  and  if  we  then  delete  B  we  end  up  with  the  flock 
{0,  {A  ~  Z?}}.  This  is  different  from  the  Hock  {{A  =  B}},  since  tiic  union  of  the  models  of  the  first  flock 
consists  of  all  possible  structures,  whereas  the  models  of  {{A  s  B}}  are  only  those  models  in  which  A  and 
D  are  equivalent.  | 

Similarly,  the  insertion  of  E  does  not  give  the  same  result  as  inserting  the  sentences  in  E  one  by  one. 
The  following  theorem  shows,  however,  that  for  flocks,  batch  insertions  ran  be  simulated  by  single  updates. 

Theorem  5:  Let  E  =  {oq,..  .  ,a„)  be  a  consistent  set  of  sentences  and  let  S  be  a  (lock.  Then  the  result  of 
inserting  E  into  S  is  the  same  as  first  deleting  -'(<Ti  A  •  •  •  A  it,,)  and  then  inserting  the  <r,’s  one  by  one. 

Proof:  A  theory  S  is  consistent  with  S  iff  S  — .(cr i  A  •  •  A/r,t).  Let  T  be  the  result  of  deleting  A  -  •  -Ao„) 

from  S.  We  claim  that  S'  =  {T  U  E  |  T  €  T}  is  the  result  of  inserting  E  into  S. 

First,  let  T  be  a  theory  in  T.  It  accomplishes  the  deletion  of  ->(cr i  A  •  •  •  A  a„)  from  some  S  €  S  minimally. 
We  claim  that  T UE  accomplishes  the  insertion  of  E  into  S  minimally.  It  is  clear  that  TuE  accomplishes  the 
insertion  of  E.  If  T'  accomplishes  the  insertion  with  fewer  deletions  that  7’UE,  then  T'  also  accomplishes  the 
deletion  of  "((Ti  A  ■  •  •  A  <r„)  from  i’  with  fewer  deletions  than  T  with  respect  to  S,  a  contradiction.  Clearly 
no  theory  can  accomplish  the  insertion  of  E  into  S  with  fewer  insertions  that  Tu  E  with  respect  to  S,  since 
the  only  insertions  here  are  the  seutcuces  of  E.  This  shows  that  each  theory  in  S'  is  in  the  result  of  inserting 
E  into  S. 

Now  let  T  be  a  theory  iu  the  result  of  inserting  E  into  S.  i.c..  T  accomplishes  the  insertion  of  E  into  some 
i’6  S  minimally.  Let  T'  =  T  —  (E  -  A’).  Then  T'  is  consistent  with  E  and  so  T'  accomplishes  the  deletion  of 
-’(/Ti  A  -  •  •  A<r„)  from  6'.  If  some  theory  S'  accomplishes  the  deletion  with  fewer  deletions  than  T'  with  respect 
to  S,  then  S'  U  E  accomplishes  the  insertion  of  E  with  fewer  deletions  than  T.  a  contradiction.  Therefore, 

T'  accomplishes  the  deletion  of  ■•(<7i  A  •  ■  •  A<7„)  from  5  minimally,  i.o.,  T'  6  T,  and  therefore  T  —  T'  U  E  is 

in  S'.  | 

Remarks: 

1.  The  theorem  does  not  hold  for  theories.  For  example,  let  be  the  theory  {  A ,  Z? } ,  and  E  the  set 
{(A  £  B)  A  C}.  Then  the  result  of  inserting  E  into  A  is  the  theory 

{A  V  ((A  £  B)  A  C).  B  v  ((A  £  B)  AC).  A  V  B.  (A  £  D)  A  6’}. 

On  the  other  hand,  the  result  of  deleting  (A  =?  B)  V  —C  from  ,S’  is  the  theory  {A  V  B),  and  if  we 

then  just  insert  (A  £  B)  AC,  we  get  the  theory  (A  V  D,  (/l  ;£  B)  A  G’}. 

2.  There  axe  hatch  deletions  from  Hocks  that  cannot  be  simulated  by  any  sequence  of  single  updates. 
For  example,  if  we  delete  {A,Z?}  from  the  Hock  {{A  V  Z7.  A  V  -’R.-vl  V  0}},  we  get  the  Hock 
{{A  V  B},  {A  V  -> B ,  ->A  V  B}}.  It  is  shown  in  [Ku]  that  the  latter  Hock  cannot  be  obtained  from 
any  singleton  Hock  by  single  updates. 


5.  Equivalence  Forever 

5.1.  Definitions. 


Two  theories  or  flocks  are  logically  equivalent  if  they  have  the  same  models.  Nevertheless,  this  does 
not  guarantee  that  they  will  continue  to  have  the  same  models  after  any  sequence  of  updates,  as  the  next 
example  shows. 

Example  3:  The  two  theories  {/?}  and  (i?./l  V  Z? }  arc  logically  equivalent.  However,  if  we  delete  D  from 
both  of  them  we  get  the  noncqiiivalcnt  theories  (4  and  {/I  V  D}. 

The  two  Hocks  {{£?}}  and  {{D,.4vZ?}}  arc  logically  equivalent.  After  deleting  D  from  both  of  them  wc  get 
the  nonequivalcnt  flocks  {0}  mid  {{/l  V  £?}}.  | 

We  say  that  two  theories  or  flocks  are  equivalent  forever  if  iiftcr  applying  any  sequence  of  updates 
wc  always  get  two  theories  or  flocks  that  have  the  same  models.  In  the  rest  of  this  section  we  supply 
characterizations  for  equivalence  forever. 

Wc  use  the  following  definition. 

Definition  9:  We  say  that  a  theory  S  covers  a  theory  T  iff  every  sentence  r  in  T  is  logically  equivalent  to 
a  conjunction  <ti  A  •  •  ■  A  <r„  of  sentences  in  S.  (An  empty  conjunction  is  by  convention  valid.) 

5.2.  Equivalence  Forever  for  Theories. 

Theorem  6:  Let  S  and  T  be  finite  theories.  The  following  arc  equivalent. 

1.  S  and  T  arc  equivalent  forever  under  updates. 

2.  A  and  T  are  equivalent  forever  under  batch  updates. 

3.  A’  ;utd  T  are  equivalent  forever  under  deletions. 

4.  5  <uid  T  are  equivalent  forever  under  batch  deletions. 

5.  Each  subset  of  S  is  logically  equivalent  to  a  subset  of  T ,  mid  vice-versa. 

6.  5  covers  T,  mid  vice-versa. 

Proof:  (2)  =>  (1),  (2)  =>  (4),  (4)  =>  (3),  (5)  =>  (C)  and  (1)  =>  (3)  are  obvious.  We  shall  show  (3)  =>  (G), 
(6)  =>  (5)  mid  (5)  (2). 

(3)  =>  (G)  We  shall  prove  the  following  statement,  which  we  call  statement  ('),  inductively  on  k: 

(*)  Let  Tt  and  7j  be  finite  theories  that  are  equivalent  forever  under  deletions.  If  there  is  a 
structure  M  that  obeys  r  €  T\  and  that  also  obeys  exactly  k  sentences  in  Ti ,  then  r  is  equivalent 
to  a  conjunction  of  sentences  in  Tj . 

Statement  (*)  implies  (3)  =>  (6).  For,  let  A’  =  7\  and  T  =  Ti,  and  let  r  be  an  arbitrary  member 
of  A’.  Let  M  be  a  structure  wjhich  obeys  r.  (There  is  such  a  structure  since  we  deal  only  with 
consistent  sentences.)  Since  T  is  finite,  there  is  some  k  (possibly  k  —  0)  such  that  M  obeys  exactly 
k  sentences  in  T.  Then  statement  (*)  tells  us  that  t  is  equivalent  to  a  conjunction  of  sentences  in 
T,  as  desired. 

If  7*i  and  Tj  are  finite  theories  and  if  \1  is  a  structure,  it  is  convenient  for  us  to  define  <r(iVf,  Ti,Ti) 
to  he  the  sentence 

\J {v  |  o  6  Ti  U  Ti  and  \t  violates  o). 
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It  is  easy  to  ace  that  there  is  a  single  maximal  theory  which  results  from  deleting  this  sentence 
from  7*i .  namely,  the  set  of  ;dl  sentences  in  7\  whirh  are  true  in  XI.  Of  course,  the  same  is  true 
about  7V  VVc  are  now  ready  to  prove  statement  (*),  by  induction  on  fc. 

fc  —  0:  In  this  c:»se,  XI  obeys  no  sentence  in  7V  Let  ns  denote  by  T[  (respectively,  Tj)  the  residt 
of  deleting  a  (XI.  Ti ,  T; )  from  7\  (respectively,  Ti).  Since  M  obeys  no  sentence  in  TV  it  follows 
that  To  is  the  empty  theory,  which  every  structure  obeys.  Since  T[  and  7j  arc  etpiivalent  (by 
equivalence  forever  of  T i  and  7%  tinder  deletions),  it  follows  that  T{  consists  of  valid  sentences. 
But  r  belongs  to  T[,  since  XI  obeys  r.  It  follows  that  r  is  valid,  and  is  therefore  equivalent  to  a 
conjunction  of  sentences  ill  7j. 

Inductive  step:  Assume  that  the  inductive  hypothesis  (*)  holds,  with  k'  substituted  for  fc,  for  every 
fc'  <  fc,  and  for  every  choice  of  7\  and  Tj.  Let  7\  and  T<  be  finite  theories  that  are  equivalent 
forever  under  deletions,  and  let  XI  be  a  structure  which  obeys  t  €  Ti  and  which  also  obeys  exactly 
fc  sentences  in  TV  We  must  show  that  r  is  equivalent  to  a  conjunction  of  sentences  in  TV 

Let  us  denote  by  T[  (respectively,  7*j)  the  result  of  deleting  <r(A/.  7\,7V)  from  Ti  (respectively, 
Ti).  Then  T[  is  a  subset  of  7\  which  contains  r,  and  7  j  is  a  subset  of  Ti  which  contains  exactly 
fc  sentences  (namely,  those  sentences  in  7j  which  arc  true  in  M).  By  equividence  forever  of  TL 
and  7j  under  deletions,  we  know  that  T[  mid  Tj  are  also  equivalent  forever  under  deletions.  In 
particular,  T[  ;iml  Ti  are  equivalent,  and  so  Tj  implies  r.  If  also  r  were  to  imply  Tj  (that  is, 
if  r  were  to  imply  every  member  of  T^).  then  we  would  lie  done,  since  r  would  be  equivalent  to 
the  subset  T. {  of  TV  So  we  ran  assume  that  r  does  not  imply  TV  Therefore,  there  is  a  structure 
XI'  whirh  obeys  r  but  not  TI,.  Lot  fc'  he  the  number  of  members  of  T!,  which  XI'  obeys.  Then 
0  <  fc'  <  fc,  since  T'7  contains  fc  sentences,  not  all  of  which  XI'  obeys.  By  inductive  hypothesis  (*), 
where  T[,  T’V  and  fc'  play  the  roles  of  T\,  Ti,  and  fc  respectively,  it  follows  that  r  is  equivalent  to 
a  conjunction  of  members  of  7^ ,  and  hence  of  7V 

(G)  =>  (5)  Let  5'  be  a  subset  of  S.  For  each  a  £  S',  let  T„  be  a  subset  of  T  such  that  a  is  equivalent  to  the 
conjunction  of  members  of  Ta.  Let  T'  be  the  union  of  all  sets  Ta  where  a  £  S' .  We  now  show  that 
S'  is  equivalent  to  T' .  If  r  €  T',  find  a  €  S'  such  that  r  £  T„.  Then  n  implies  r,  so  S'  implies  r. 
Hence,  S'  implies  T' .  Conversely,  assume  that  <7  £  S'.  Then  T„  implies  <r,  and  so  T'  implies  a. 
Hence,  T'  implies  S'. 

(5)  =->  (2)  Assume  that  (5)  holds.  It  suffice*  to  show  that  if  S*1*  (respectively.  T*1')  is  the  result  of  applying 
a  batch  update  u  to  S  (respectively,  T),  then  every  subset  of  is  equivalent  to  a  subset  of  T*1* 
and  vice  versa. 

Let  the  update  u  be  the  deletion  of  E  (we  shall  remark  at  the  end  how  to  modify  the  proof  to  deal 
with  the  case  where  «  is  an  insertion.)  Let  5’*  be  a  maximal  subset  of  that  is  consistent  with 
—’<7,  for  every  <7  £  E.  By  assumption,  there  is  a  subset  of  T  that  is  equivalent  to  S' .  Let  T*  be  a 
maximal  such  subset  of  T.  We  now  show  that  T '  is  a  maximal  subset  of  T  that  is  consistent  with 
-■<7,  for  every  <7  €  E.  Clearly  T*  is  consistent  with  every  ->tr.  since  T‘  is  equivalent  to  .V*,  and  .S'* 
is  consistent  with  every  -vr.  If  T'  is  not  maximal,  then  tind  T1  C  T  consistent  with  every  -•<7  such 
that  T*  C  T1 .  By  definition  of  Tf,  we  know  that  T‘  is  not  equivalent  to  7".  By  hypothesis,  there  is 
a  subset  of  S  that  is  equivalent  to  T1;  let  S'  be  a  maximal  such  subset.  Since  .S’*  =  T*  C  T’  ~  S', 
it  follows  that  S'  implies  S' ,  and  so  S’  U  5*  is  equivalent  to  S'.  By  maximally  of  S',  it  follows 
that  .S’*  C  S'.  But  S'  S',  since  S'  ~  T*  £  T'  =  S'.  Hence,  S'  C  S'.  Since  T'  is  consistent 
with  ~'i7,  for  every  <7  £  E,  and  since  T1  =  5',  it  follows  that  S'  is  consistent  with  every  -o .  This 
contradicts  inaximality  of  .S’*. 

Let  ns  rail  each  maximal  subset  of  S  (respectively,  T)  that  is  consistent  with  every  -cr  :ui  S- 
candidntc  (respectively,  a  T-amdidnte).  We  have  shown  that  for  each  S-c.uididntc  S'  there  is  a 
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T-candidate  T*  such  that  5f  =  7't .  Similarly,  for  each  T-candidate  Tf  there  is  an  ^'-candidate 
such  that  Sf  =  T* .  Furthermore,  it  is  easy  to  show  that  this  correspondence  is  hijective.  That  is, 
if  Si,  . . . ,  Sn  are  all  of  the  distinct  ,9-candidates,  then  there  is  a  listing  Ty,  , . .  ,  T„  of  all  of  the 
distinct.  T-candidates  such  that  .9;  ~  Ti,  for  l  <  i  <  n. 

The  result  S *')  of  the  update  on  .9  is  the  theory  V { .S’,-  j  1  <  *  <  n}.  and  an.ilogously  for  T*1*.  We 
shall  show  T(1)  covers  S’*1).  As  in  the  proof  that  (-1)  =>  (3),  it  then  follows  that  every  subset  of 
S’*1)  is  equivalent  to  a  subset  of  T*1',  as  desired. 

Let  a  'be  a  member  of  6’*1).  We  know  that  a  is  of  the  form  <*i  V  •  •  ■  V  on,  where  a,  €  .9,,  for 
1  <  »  <  n.  By  assumption,  there  is  a  subset  T'  of  T  which  is  equivalent  to  tty.  Since  a,  G  Si  =  Ti, 
it  follows  that  Ti  implies  a;,  and  hence  T,  implies  T[.  So  by  maximality  of  T,-,  we  know  that 
T-  C  Ty.  Let  Q  be  the  set  {tj  V  •  •  •  V  r„  |  r,-  G  T[  for  1  <  »  <  a}.  Then  Q  C  T*1).  Let  r  be  the 
conjunction  of  members  of  Q.  The  proof  is  complete  if  we  show  that  a  is  equivalent  to  r.  Let  r' 
be  the  conjunction  of  members  of  T',  for  i  <  »  <  n.  «uid  let  7  be  the  disjunction  r{  V  •  •  •  V  r'n. 
Clearly  r'  is  equivalent  to  or,,  since  both  ;irc  equivalent  to  T'  (1  <  i  <  n).  Hence,  7  is  equivalent 
to  or.  But  r  is  the  conjunctive  normal  form  of  7,  and  consequently  r  is  equivalent  to  a. 

We  close  by  remarking  how  the  proof  should  he  modified  to  deal  with  insertions  rather  than 
deletions.  Assume  that  the  update  u  is  the  insertion  of  E.  Let  ns  call  each  maximal  subset  of  5  , 
(respectively,  T)  that  is  consistent  with  £  an  S-candklntc  (respectively,  a  T-caiiditInte).  Just  as 
before,  it  follows  that  if  S i,  . . . ,  S„  are  all  of  the  distinct  .9-candidates,  then  there  is  a  listing  Ty, 

. . . ,  T„  of  all  of  the  distinct  T-candidates  such  that  S;  =  T,-,  for  1  <  «  <  n.  The  result  of  the 
update  on  S  is  the  theory  U  E  |  1  <  i  <  n},  and  analogously  for  T*1*.  Let  <1  be  a  member 

of  .9  *  1  •  .  We  know  that  a  is  of  the  form  07  V  •  •  •  V  a„,  where  a;  G  Si  U  E,  for  1  <  i  <  n.  If  no 
a,  is  in  E,  then  the  proof  proceeds  as  before.  Assume  now  that  some  a,-  is  in  E.  For  simplicity 
in  description,  assume  that  a*  is  in  E,  but  a;  €  .9,  for  3  <  i  <  n  (otherwise  there  is  an  obvious 
modification  in  the  proof).  As  before,  find  a  subset  T[  of  T  which  is  equivalent  to  nr;,  for  i  >  2. 
Let  Q  he  the  set  {«i  V  r j  V  •  ■  •  V  r„  |  r,-  G  T-  for  2  <  i  <  n).  Then  Q  C  2’*1),  and,  as  before,  or  is 
equivalent  to  the  conjunction  of  members  of  Q.  | 

5.3.  Equivalence  Forever  of  Flocks. 

We  do  not  have,  at  present,  a  simple  necessary  and  sufficient  condition  for  equivalence  forever  of  general 
flocks.  However,  for  singleton  flocks,  i.e.,  flocks  that  contain  only  one  theory,  we  can  prove  an  analogue  to 
Theorem  6. 

Theorem  7:  Let  S  and  T  be  finite  theories,  and  let  S  =  {S}  and  T  =  {T}  be  singleton  Hocks.  The 
following  arc  equivalent. 

1.  S  and  T  are  equivalent  forever  tinder  updates. 

2.  S  and  T  arc  equivalent  forever  under  batch  updates. 

3.  S  and  T  are  equivalent  forever  under  deletions. 

4.  S  and  T  arc  equivalent  forever  under  batch  deletions. 

5.  Each  subset  of  S  is  logically  equivalent  to  a  subset  of  T,  .and  vice-versa. 

C.  .9  covers  T  and  T  covers  S. 

Proof:  (2)  (l),  (2)  (4),  (4)  =►  (3),  (5)  =>  (0)  and  (1)  =>  (3)  ;ixe  obvious,  ;uid  (G)  ^  (5)  was  proven  in 

Theorem  G.  We  now  show  (3)  =>  (6)  and  (G)  ■=>  (2). 
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(3)  ->  (6)  Assume  that  .9  (loos  not  cover  T.  Then  there  is  ii  sontonco  r  in  T  that  is  not  logically  equivalent  to 
any  conjunction  of  sentences  ol  9.  Let  E  he  the  set  of  sentences  in  .S’  IJ  T  that  arc  not  implied  by 
t.  Let  R  he  be  the  set  of  maximal  disjunctions  of  sentences  in  E,  i.e.,  the  set.  R  of  till  disjunctions 
of  sentences  in  E  such  that  if  we  add  tiny  other  sentence  in  E  to  the  disjunction,  the  result  is 
implied  by  r.  Formally,  R  consists  of  all  sentences  of  the  form  <7(  V  •  •  •  V  ,  where  each  u,  is  in  E, 

r  ^  Oy  V  •  "  V(7fc, 

and  if  a  is  any  sentence  in  E  distinct  from  all  the  oq’s,  then 

T  (7!  V  •  •  •  V  (Tfc  V  <T. 

We  now  show  that  if  we  delete  the  sentence's  in  R  from  the  flock  S  -  {9},  one  by  one,  in  any 
order,  the  resulting  Hock  S'  will  be  equal  to  {.9  -  E},  and  similarly  deleting  R  from  T  =  {T}  will 
result  in  {T  --  E}.  Wc  prove  this  for  S,  and  an  analogous  proof  holds  for  T. 

Since  no  sentence  in  E  is  implied  by  r,  every  it  in  E  can  be  extended  to  a  maximal  disjunction 
(7  V  <Ti  V  •  •  •  V  frit  that  is  in  the  set  R.  After  deleting  this  disjunction,  we  get  a  Hock  of  theories, 
none  of  which  can  contain  any  of  the  sentences  a,  a x,  ... ,  ffj.  Therefore  after  deleting  all  of  the 
sentences  in  R  from  S  we  get  a  Hock  S'  of  theories,  each  of  which  must  he  a  subset  of  .9  —  E. 

We  now  show  by  induction  on  the  number  of  deletions  that  the  result  is  a  singletoi  Hock,  consisting 
of  one  theory  that  is  a  superset  of  9  -  E.  The  basis  for  the  induction  is  the  initial  flock  S.  We 
now  show  that  if  we  have  a  flock  consisting  of  one  theory  that  is  a  superset  of  5  -  E  and  a  subset 
of  S  and  we  delete  a  sentence  in  the  set  R  from  it.  wc  get  a  singleton  flock  that  also  consists  of 
one  theory  that  is  a  superset  of  S  —  E  and  a  subset  of  9. 

Suppose  that  we  have  such  a  flock  consisting  of  the  theory  S'  and  wc  delete  from  it.  a  sentence 
a i  V  •  •  •  V  (T*.  of  R.  Let  E  -  (it i, . . .  ,  <7*}  -  {ntj, Since  Oi  V  •  •  •  V  /t*  is  maximal,  r  implies 
<Ti  V  •  •  •  V  /y*  V  nq  for  1  <  i  <  m,  and  consequently  -•aq  implies  <7i  V  •  •  •  V  (7*  V  -w  for  1  <  i  <  to. 
Suppose  that,  {r,  <n, . . . ,  wm}  implies  <7i  V  •  •  •  V  thou  r  implies  ->«i  V  •  •  ■  V  V  V  •  ■  •  V  (7*. 
But  then  it  follows  that  r  implies  <7j  V  -  ■  •  V(7*  -  contradiction.  But  r  implies  9  ~  E  by  definition  and 
S'  is  a  subset  of  9.  so  {S'  —  E)  U  {uq , . . . , or,,, }  dot-s  not  imply  <t(  V  •  •  •  V<7it .  Tims  .9'  —  {oq, .  .  .  ,<7fc } 
is  consistent  with  -'(<7l  V  •  •  ■  V  <7*).  It  follows  that  the  result  of  deleting  i7t  V  •  ■  •  V  <7*  from  {.9'}  is 
{.9'  -  {<T[. . . .  ,tT).}}.  This  completes  the  induction  and  shows  that  the  result  of  deleting  R  from 
S  =  {9}  is  S'  -  .9  -  E. 

By  the  definition  of  E,  we  have  r  |=  9  —  E.  and  therefore  r  implies  the  conjunction  of  all  the 
sentences  in  9  — E.  Since  r  is  not  logicidly  equivalent  to  any  conjunction  of  a  collection  of  sentences 
in  9,  it  follows  that  9  —  E  r.  Therefore,  there  must  he  a  model  M  of  9  -  E  that  is  not  a  model 
of  r.  Then  M  is  a  model  of  S'.  However,  since  r  in  in  T  —  E,  M  is  not  a  model  of  T'.  It  follows 
that  S  and  T  arc  not  equivalent  forever  under  deletions. 

(C)  =>  (2)  We  show  by  induction  on  the  number  of  updates  that  we  always  have 

(V9'  6  S')(3T'  e  T')(9'  covers  T'  A  T'  covrs  S'),  (1) 

where  S'  and  T'  are  the  flocks  we  get  from  S  and  T  by  performing  some  updates.  By  our 
assumption.  Condition  1  holds  at  the  beginning,  when  both  flocks  arc  singletons. 

Assume  that  Condition  1  holds  after  some  insertions  and  deletions.  We  have  to  show  tliat  it 
continues  to  hold  alter  deleting  a  set  of  sentences  E.  The  argument  for  insertion  is  similar  and  is 
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loft  to  the  render.  We  shall  use  S1  ami  T1  for  the  Hocks  before  the  deletion,  S2  and  T2  for  the 
flocks  afterwards. 

Lot  S'  be  a  theory  in  the  flock  S2.  We  first  show  that  there  is  some  theory  in  T2  that  covers 
S'.  By  the  definition  of  deletion,  S'  must  he  a  maximal  subset  of  soiiip  theory  Sl  in  the  Hoek 
Sl  that  does  not  imply  any  sentence  in  E.  By  the  inductive  hypothesis,  there  is  a  theory  Tl  in 
the  Hock  T1  such  that  Sl  covers  7’1,  and  Tl  covers  S'1.  Let  rr,  he  any  sentence  ill  the  theory  S'2. 
Since  S'2  is  a  subset  of  S’1  ami  Tl  covers  S’1,  there  are  sentences  rtl,  ...,  rim>  in  Tl  such  that 
<T,  2  T,i  A  ■  •  ’  A  T,m>. 

Let  A  be  the  set  of  .ill  these  r./s,  for  all  a,  'a  in  S’2.  We  claim  that  A  does  not  imply  any  sentence 
in  E.  Assume  otherwise,  i.e.,  A  )=  <r,  for  some  n  in  E.  Since  each  <7,  in  S2  implies  ail  the 
corresponding  r,j's  in  A,  we  have  S’2  }=  .4,  and  therefore  S'  |^-  rr,  a  contradiction.  Therefore 
A  does  not  imply  any  sentence  in  E  and  can  be  extended  to  a  maximal  subset  of  Tl  with  this 
property.  Call  the  maximal  subset  7'2.  Since  A  covers  S’2,  T2  also  rovers  S’2.  Wc  shall  now  show 
that  S'2  covers  T2,  thus  completing  the  proof. 

Let  t  be  any  sentence  in  T2 .  We  have  to  show  that  it  is  logic, -illy  equivalent  to  a  conjunction  of 
sentences  in  S’2.  Since  S’1  covers  T1  ;unl  T2  is  a  subset  of  Tl ,  there  are  <r i , . . .  ,0*  in  Sl  such  that 

r  =  A  •  •  •  A  <7*.  (2) 

We  know  that  T2  (=  S’2 ,  since  T2  covers  S2 .  We  also  know  that  T2  |=  r  {=  a for  each  er,-.  If 
some  rr,  were  not  in  S’2,  the  fact  that  S’2  is  a  maximal  subset  of  S’1  not  implying  any  sentence  in 
E  would  entail  that  S’2  U  {rr,}  implies  some  sentence  o  <B  E.  But  then  T2  \=  tj,  a  contradiction. 
This  shows  that  each  rr,-  is  in  S'2,  ;utd  therefore  S’2  covers  T2 . 

Mow  let  M  be  a  model  of  some  theory  S'  in  the  flock  S'.  By  Condition  1,  there  is  some  theory 
T'  in  the  flock  T',  such  that  S'  covers  T' .  This  implies  that  M  is  also  a  model  of  7".  Thus  every 
model  of  S'  is  also  a  model  of  T'.  Similarly,  every  model  of  T'  is  also  a  model  of  S'.  | 

Example  4:  The  flocks  {{ .4.  B,  A  A  fl}}  and  {{A,0}}  are  equivalent  forever.  The  llorks  {{A,B,A  V  B}} 
and  {{A,  D})  are  not  equivalent  forever.  If  we  delete  A  ;u»d  then  0.  we  get  {{A  V  0}}  from  the  first  flock 
;uid  {(4}  from  the  second  one.  g 

For  arbitrary  Hocks  we  only  have  a  sufficient  condition  for  equivalence  forever. 

Theorem  8:  Let  S  and  T  be  two  flocks  that  satisfy  the  conditions 

(VS  €  S)(37’  £  T)(S  covers  T  A  T  covers  S)  (3) 

and 

(VT  G  T)(3S  G  S)(T  covers  S  A  S  covers  T)  (4) 

Then  S  ami  T  ;irc  equivalent  forever. 

Proof:  See  the  proof  of  (G)  -=>  (2)  in  Theorem  7.  | 

Remarks: 

I-  By  Theorem  6  we  can  replace  "S  covers  T’’  in  this  theorem  by  the  condition  "for  every  subset  of 
S.  there  is  a  logically  equivalent  subset  of  T.” 

2.  The  above  conditions  are  not  necessary  for  equivalence  forever.  For  example,  it  is  shown  in  [Kit] 
that  the  two  flocks 

S=  {{A.  D,A  =  0},  {A,  A  :3  0},  {0,  A  =  0}} 
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